rename dmc12 inventory to cloudlorean and vault admin_password

- replace inventory/dmc12.yml with cloudlorean.yml (+ group_vars) and update
  all README/AGENTS call examples and the inventory table
- move admin_password hash into encrypted vault.yml; remove plaintext copies
  from roles/bootstrap/defaults and group_vars/external.yml
- bootstrap.yml loads vault.yml via vars_files (same pattern as monitoring)
- monitoring: PSK config/registration updates, docker role defaults,
  os-updates logging/reboot refinements, ansible.cfg/execute.sh tweaks
- add .project-wiki knowledge base and .github agent instructions

roles/monitoring/defaults/main.yml

@@ -17,11 +17,11 @@ monitoring_zabbix_docker_endpoint: "unix://{{ monitoring_zabbix_docker_socket_pa
 # --- TLS / PSK ----------------------------------------------------------------
 monitoring_zabbix_tls_connect: psk          # outgoing connections from agent: psk
 monitoring_zabbix_tls_accept: psk           # incoming connections to agent:   psk
-monitoring_zabbix_psk_identity: "{{ inventory_hostname }}"
+monitoring_zabbix_psk_identity: "{{ monitoring_zabbix_host_name }}"
 monitoring_zabbix_psk_file: /etc/zabbix/zabbix_agent2.psk
 monitoring_zabbix_psk_bits: 256             # 32 bytes -> 64 hex chars
 # Directory on the Ansible controller used to persist per-host PSKs across runs.
-monitoring_zabbix_psk_store: "{{ playbook_dir }}/../.zabbix-psk"
+monitoring_zabbix_psk_store: "{{ role_path }}/../../.zabbix-psk"
 monitoring_zabbix_psk_store_mode: "0700"
 
 # --- Zabbix Proxy (optional) --------------------------------------------------
@@ -45,4 +45,4 @@ monitoring_zabbix_host_inventory_mode: manual
 # Templates linked to every host
 monitoring_zabbix_templates: ["Linux by Zabbix agent", "Zabbix agent2"]
 # Templates added when a Docker socket is present on the host
-monitoring_zabbix_docker_templates: ["Docker by Zabbix agent2"]
+monitoring_zabbix_docker_templates: ["Docker by Zabbix agent2"]